Comments (5)
--reuse-values
makes Helm re-use the values that it is currently using for your Helm chart release. The newly introduced property crds
is not part of your existing values.yaml
(it was added to the defaults in values.yaml
in v1.15.0), causing Helm to fail when we try to read the enabled
field on this property (interface {}.enabled
) in the new templates.
By using --reset-then-reuse-values
, you use the new defaults that are provided in the new version of the Helm chart. Afterwards, the existing values are applied on top of these defaults. This resolves the issue because the crds
is now a property that exists in the defaults.
In my opinion, this is an issue caused by how Helm handles changing the default values.yaml
values across versions. It is impossible for us to introduce new complex properties without breaking upgrading with the --reuse-values
flag.
Not sure if there are any other issues with the --reset-then-reuse-values
flag, but I would advise to use that flag instead (like explained on the website https://cert-manager.io/docs/installation/upgrade/#crds-managed-using-helm)
from cert-manager.
If I perform a clean helm chart install, everything works as expected, only the upgrade is broken.
from cert-manager.
Can you change installCrds to crds.enabled? https://cert-manager.io/docs/installation/helm/
from cert-manager.
@fmunteanu I think you have to use the --reset-then-reuse-values
flag, as described here: https://cert-manager.io/docs/installation/upgrade/#crds-managed-using-helm
--reuse-values
should not be used when upgrading versions.
from cert-manager.
@declum thank you for pointing this out, I see installCRDs
was deprecated. Still, this should not affect the upgrade.
You are correct @inteon, I'm using Ansible to deploy the cert-manager Helm chart, with reset_values: false
and reuse_values: true
. I had no idea about this, I've been using these two settings for all other charts, without any issues.
Can you please explain why this breaks the upgrade? Thank you.
from cert-manager.
Related Issues (20)
- Cert Manager Helm Chart: Unnecessary RBAC permissions HOT 1
- Set default kubernetes audiences for the service account used in k8s auth additionally to the list of provided audiences
- Cert-manager fails with invalid x509 certificate error when running on istio HOT 8
- cainjector shows usages and non json output, if error appears HOT 2
- jks keystore in secret is removed when a secret is referenced by multiple certificates HOT 5
- Expose metrics for webhook and ca-injector
- When using a keystore.p12, we need to be able to specify the name for the alias HOT 1
- cert-manager-cainjector is looking for ca secret in wrong namespace? HOT 2
- Custom keystore filename when onboarding certificate. HOT 1
- nameOverride and fullnameOverride are missing from helm values.yaml HOT 1
- [Helm] add failurePolicy configuration to values.yaml HOT 2
- cert-manager randomly crashes with leader election lost HOT 2
- Challenge getting 404 instead of 200
- Job label in Helm chart of cert-manager shouldn't be templated from chart name HOT 2
- cert manager controller pod showing unknown flag: --cluster-resource-namespace HOT 3
- Support monitoring Traefik IngressRoutes (CRDs) HOT 2
- CRDs not being installed since v1.15.0 HOT 5
- Vault issuer should retry on volatile errors HOT 3
- Add global image repository value to helm values to facilitate private repo and eiliminate need to maintain individual repo image paths
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cert-manager.